...
Unbound APIs are designed to be accessed server side for machine-to-machine communication. Unbound access uses Basic Auth (clientId/secret) OAuth flow.
It is not safe to implement Unbound APIs from the browser because the customer identity can be determined. Please use with care.
...